jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]41d02568627c9fa8a944a71a36a2a6b1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.41d02568627c9fa8a944a71a36a2a6b1
Size 269KB
Sample261014-ctf82sxtcv
SHA256 87e729e9987608add565477b0772ec40aecb32be43e6c33a2b28ef7d987e4818
MD5 41d02568627c9fa8a944a71a36a2a6b1
SHA1 6eddda6a041f9212b87934bf7ffae413a46f19c8
SHA512 1075dea02cf5c7e70820b3b91fc6b2e434f11b8684c2e021281981a9e76fcd5733d4fc968122d1490f7d6208a07d6cccc7def5abce7f139723a81e7220cfcc65
SSDEEP 3072:YcIIzHDa14HnN5b1xD5ed0QFEAkmvUhOZzXZ6ntzyd3JOM6ZDqMtOmL9BNg5:YIPHNZvDgdW96FMvLC
TLSH
T1DD44BF5778B99E66C0054736EB2BD9E4E4D9AF13E574C4B7BCB4079F8221A88103F272
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.41d02568627c9fa8a944a71a36a2a6b1

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.41d02568627c9fa8a944a71a36a2a6b1

.exe 269KB

jaffacakes118_HEUR.Trojan.Win32.Generic.41d02568627c9fa8a944a71a36a2a6b1

IMPHASH f5dca56457bb25e5a665fcb4b1a2daa9
SHA256 87e729e9987608add565477b0772ec40aecb32be43e6c33a2b28ef7d987e4818
MD5 41d02568627c9fa8a944a71a36a2a6b1
SHA1 6eddda6a041f9212b87934bf7ffae413a46f19c8
SHA512 1075dea02cf5c7e70820b3b91fc6b2e434f11b8684c2e021281981a9e76fcd5733d4fc968122d1490f7d6208a07d6cccc7def5abce7f139723a81e7220cfcc65
SSDEEP 3072:YcIIzHDa14HnN5b1xD5ed0QFEAkmvUhOZzXZ6ntzyd3JOM6ZDqMtOmL9BNg5:YIPHNZvDgdW96FMvLC
TLSH
T1DD44BF5778B99E66C0054736EB2BD9E4E4D9AF13E574C4B7BCB4079F8221A88103F272
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection lstrcmpiA lstrlenA lstrcmpA LoadLibraryA GetModuleHandleA SearchPathA VirtualUnlock CreateActCtxA GetVolumeInformationW GetNativeSystemInfo GetNumaAvailableMemoryNode CreateWaitableTimerW FindFirstFileW lstrcmpiW AddAtomW AddAtomA GetLastError TerminateProcess ReadConsoleOutputAttribute GetNumberOfConsoleInputEvents CreateTapePartition SystemTimeToFileTime GetModuleFileNameW SetFirmwareEnvironmentVariableW SetUnhandledExceptionFilter GetVolumeInformationA FreeLibraryAndExitThread LocalFree WriteConsoleOutputCharacterA GetEnvironmentVariableA GetDateFormatW ScrollConsoleScreenBufferA GetFileAttributesA GetProfileSectionW GetEnvironmentStringsW AllocateUserPhysicalPages ReadConsoleW OpenSemaphoreW DeleteVolumeMountPointA SetFilePointerEx GetProcessAffinityMask GetLargestConsoleWindowSize WriteTapemark TransmitCommChar MoveFileWithProgressA WritePrivateProfileSectionA _lwrite GetCurrentProcessId OutputDebugStringA GlobalHandle WritePrivateProfileStructA SetCommBreak LoadLibraryExA GetDiskFreeSpaceExA SetUserGeoID FindAtomW FindVolumeMountPointClose GetTempPathW GetTempFileNameA GetSystemTimeAsFileTime CreateJobSet LocalFileTimeToFileTime DnsHostnameToComputerNameW IsValidLocale FatalAppExitW IsDBCSLeadByteEx SetCriticalSectionSpinCount IsValidLanguageGroup FormatMessageW SetComputerNameExW FindFirstChangeNotificationA GetHandleInformation AssignProcessToJobObject SetPriorityClass CommConfigDialogA FindVolumeClose CallNamedPipeW LockResource VerifyVersionInfoA SetSystemTime ExpandEnvironmentStringsW FindFirstVolumeW GetThreadSelectorEntry WriteConsoleOutputW PostQueuedCompletionStatus TlsGetValue HeapUnlock GetConsoleAliasExesLengthA GetPrivateProfileIntA VirtualQuery IsBadReadPtr GetConsoleAliasA SetThreadExecutionState lstrcmpW CreateNamedPipeW GetCurrentActCtx ExitThread InterlockedExchangeAdd HeapQueryInformation SetConsoleTextAttribute GetConsoleSelectionInfo LCMapStringW GetCurrencyFormatW SetLocaleInfoA GlobalDeleteAtom GetDiskFreeSpaceW GetNumberFormatW IsBadWritePtr SetConsoleActiveScreenBuffer CommConfigDialogW LCMapStringA SwitchToThread SetDefaultCommConfigA FillConsoleOutputCharacterA InterlockedDecrement GetTempPathA CreateMutexA GetDriveTypeW GetConsoleAliasesLengthW PulseEvent GetCPInfoExW QueryInformationJobObject EraseTape OpenFileMappingW GlobalAlloc FileTimeToDosDateTime GlobalReAlloc GetCalendarInfoW DeviceIoControl ContinueDebugEvent SwitchToFiber SetNamedPipeHandleState CreateProcessW GlobalUnfix WriteFileEx EscapeCommFunction SetCurrentDirectoryW LockFile GetVolumePathNamesForVolumeNameA HeapFree FindResourceExA SetFileValidData GetCurrentThreadId TerminateJobObject GetUserGeoID TlsAlloc CreateJobObjectW Beep DisconnectNamedPipe VirtualAllocEx GetCPInfoExA GetSystemTime CreateFileA GetLocaleInfoA TzSpecificLocalTimeToSystemTime HeapDestroy GetPrivateProfileStringW DeleteAtom GetComputerNameExW MoveFileW CreateProcessA RequestWakeupLatency GetLocaleInfoW _lclose CreateDirectoryExW LeaveCriticalSection OpenThread GetFileAttributesExW GetShortPathNameA SetConsoleTitleW MoveFileExW SetConsoleCursorPosition CreateTimerQueue GetProcessHandleCount GetModuleHandleExA GetCurrentConsoleFont ProcessIdToSessionId WriteConsoleOutputA SetConsoleWindowInfo MoveFileWithProgressW SetConsoleScreenBufferSize GetPrivateProfileStructA DeleteTimerQueueTimer QueryMemoryResourceNotification CreateMailslotA lstrcpyA ChangeTimerQueueTimer DeleteVolumeMountPointW SetFileApisToANSI CreateFileMappingW GetConsoleAliasesLengthA CheckNameLegalDOS8Dot3W GetSystemDirectoryW FatalExit GetVolumeNameForVolumeMountPointW GetCommState CancelIo FreeLibrary FindActCtxSectionStringW FindNextFileA SetProcessAffinityMask WideCharToMultiByte GetConsoleTitleA GetThreadPriorityBoost GetNamedPipeInfo GlobalFindAtomW GetConsoleAliasesW GetQueuedCompletionStatus EnumDateFormatsExW GetGeoInfoA WaitForMultipleObjectsEx HeapLock ReplaceFileW EnumSystemLocalesA SetThreadAffinityMask _lread GlobalUnWire SetVolumeMountPointW BuildCommDCBW InterlockedIncrement HeapAlloc GetSystemDirectoryA GetVersion EnumSystemCodePagesA GetShortPathNameW ResumeThread LocalFlags InterlockedPushEntrySList TryEnterCriticalSection SetupComm SetCalendarInfoW GetSystemDefaultLangID DebugSetProcessKillOnExit GetUserDefaultLangID GetVolumeNameForVolumeMountPointA VerifyVersionInfoW OpenMutexW GetConsoleProcessList lstrcpynW GetCurrentDirectoryA HeapReAlloc BuildCommDCBAndTimeoutsW WritePrivateProfileStringW PeekConsoleInputW VirtualProtect FoldStringW BeginUpdateResourceA GetCommMask EnumDateFormatsA SetCalendarInfoA SetTapeParameters GetVersionExW lstrlenW SetComputerNameW GetVolumePathNameA CreateFiberEx LocalSize CancelDeviceWakeupRequest SetConsoleCursorInfo UnlockFile CreateMailslotW DefineDosDeviceW DeleteTimerQueue FindNextVolumeMountPointW GetComputerNameW SetFirmwareEnvironmentVariableA Sleep VerLanguageNameA EnumTimeFormatsW LocalShrink HeapValidate SetEnvironmentVariableA GetConsoleAliasesA SetVolumeLabelA GetStringTypeA GetWindowsDirectoryW EnumTimeFormatsA SetThreadIdealProcessor GetFullPathNameA CopyFileExW CreateEventA GetSystemWindowsDirectoryW CreateJobObjectA SetVolumeMountPointA FindActCtxSectionStringA ResetWriteWatch UpdateResourceA OpenEventA GlobalFindAtomA FreeConsole RegisterWaitForSingleObjectEx WaitCommEvent IsWow64Process UnlockFileEx DeactivateActCtx ReadConsoleInputA GlobalFix SetLocaleInfoW GetStdHandle GetStringTypeExA GetPriorityClass QueryActCtxW VirtualFree VirtualAlloc WriteProcessMemory GetConsoleAliasExesLengthW SetFileShortNameW DisableThreadLibraryCalls WTSGetActiveConsoleSessionId ReadConsoleOutputA WaitForMultipleObjects GetProcessHeap IsProcessorFeaturePresent FillConsoleOutputCharacterW GetProcessWorkingSetSize GetOEMCP FindResourceA GetDefaultCommConfigA SearchPathW FormatMessageA SetThreadUILanguage GetNumaProcessorNode SetDllDirectoryA GetCommandLineW SetCurrentDirectoryA EnumUILanguagesW InterlockedCompareExchange GetFileInformationByHandle OpenWaitableTimerW GetPrivateProfileSectionNamesW EnumSystemCodePagesW GetModuleHandleW lstrcpynA DeleteCriticalSection GetProcAddress LoadLibraryW MapViewOfFile ExitProcess GetStringTypeW SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA HeapSize IsValidCodePage GetACP GetCPInfo FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InitializeCriticalSectionAndSpinCount GetTickCount QueryPerformanceCounter SetLastError TlsFree TlsSetValue FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwind SetFilePointer GetFileType SetHandleCount ReadFile MultiByteToWideChar CloseHandle GetModuleFileNameA WriteFile HeapCreate IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess GetStartupInfoA GetCommandLineA

comdlg32

ReplaceTextW GetFileTitleW PrintDlgA FindTextA GetSaveFileNameW

comsvcs

SafeRef CoCreateActivity RecycleSurrogate CoLeaveServiceDomain

msi

ord7 ord270 ord247 ord214 ord41 ord215 ord253 ord82 ord276 ord266 ord226 ord209 ord271 ord268 ord256 ord11 ord195 ord262 ord224 ord44 ord45 ord228 ord107 ord227 ord72 ord136 ord168 ord129 ord205 ord238 ord260 ord85 ord219 ord69 ord243 ord86 ord60 ord87 ord126 ord237 ord157 ord83 ord5 ord217 ord94 ord255

msimg32

GradientFill AlphaBlend